Lucene search
+L

9540 matches found

CVE
CVE
•added 2026/01/23 2:28 p.m.•27 views

CVE-2026-24526

CVE-2026-24526 affects the WordPress plugin Email Inquiry & Cart Options for WooCommerce (woocommerce-email-inquiry-cart-options) up to version 3.4.3. The issue is a DOM-Based XSS due to improper input handling during web page generation. Exploitation details are not provided in the initial docum...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 6:19 a.m.•22 views

CVE-2026-23962

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS5.7AI score0.00554EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•20 views

WordPress plugin: Email Inquiry & Cart Options for WooCommerce – Cross-site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.5CVSS5.6AI score0.00229EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•5 views

CVE-2026-24526: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Truman Email Inquiry & Cart Options for WooCommerce woocommerce-email-inquiry-cart-options allows DOM-Based XSS.This issue affects Email Inquiry & Cart Options for WooCommerce: from n/a throu...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•16 views

PT-2026-4376

Name of the Vulnerable Software and Affected Versions Steve Truman Email Inquiry & Cart Options for WooCommerce versions through 3.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This...

5.4AI score0.00229EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/23 12:00 a.m.•11 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2026-004928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004928 advisory. When doing multi-threaded LDAPS transfers LDAP over TLS with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore...

6.3CVSS6.5AI score0.00114EPSS
SaveExploits0References3
NVD
NVD
•added 2026/01/22 5:16 p.m.•14 views

CVE-2025-68839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS0.00208EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•4 views

CVE-2025-68839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS5.3AI score0.00208EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•32 views

CVE-2025-68839 WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS0.00208EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•4 views

CVE-2025-68839 WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

5.8AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:52 p.m.•27 views

CVE-2025-68839

CVE-2025-68839 is a WordPress plugin vulnerability in the Easy Theme Options plugin (Remi Corson) causing a Reflected XSS during web page generation. Affected versions are reported as

7.1CVSS5.8AI score0.00208EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/22 12:15 p.m.•12 views

SUSE-SU-2026:0221-1 Security update for curl

This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS bsc1256105...

6.3CVSS6.6AI score0.00114EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/01/22 10:48 a.m.•201 views

Exploit for CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Batch Scanning Tool How to us...

9.8CVSS8.3AI score0.98984EPSS
SaveExploits69
NVD
NVD
•added 2026/01/22 3:15 a.m.•19 views

CVE-2026-23962

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS0.00554EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/22 1:51 a.m.•19 views

CVE-2026-23962

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS5.6AI score0.00554EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/01/22 1:51 a.m.•20 views

EUVD-2026-4208

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS5.7AI score0.00554EPSS
SaveExploits0References4
CVE
CVE
•added 2026/01/22 1:51 a.m.•39 views

CVE-2026-23962

Mastodon is vulnerable to Denial of Service due to an unlimited maximum number of poll options for remote posts in versions before v4.3.18, v4.4.12, and v4.5.5. The underlying issue allows an attacker to create polls with a very large number of options, leading to disproportionate resource usage ...

7.5CVSS5.9AI score0.00554EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/22 1:51 a.m.•4 views

CVE-2026-23962 Mastodon vulnerable to Denial of Service from a single post (client/server)

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS5.9AI score0.00554EPSS
SaveExploits0References4
OSV
OSV
•added 2026/01/22 1:51 a.m.•15 views

CVE-2026-23962 Mastodon vulnerable to Denial of Service from a single post (client/server)

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS5.7AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/01/22 1:51 a.m.•47 views

CVE-2026-23962 Mastodon vulnerable to Denial of Service from a single post (client/server)

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing...

7.5CVSS0.00554EPSS
SaveExploits0References4
Rows per page
Query Builder